<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE web-app
     PUBLIC "-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
    "http://java.sun.com/dtd/web-app_2_3.dtd">
<web-app>
    <display-name>Web Application</display-name>
    <welcome-file-list>
        <welcome-file>index.html</welcome-file>
    </welcome-file-list>
    <error-page>
        <error-code>400</error-code>
        <location>/index.html</location>
    </error-page>
    <!-- Default: Access to everything requires login -->
    <security-constraint> 
        <web-resource-collection> 
            <web-resource-name>Web Application</web-resource-name> 
            <description>Require users to authenticate</description> 
            <url-pattern>*.jsp</url-pattern> 
            <http-method>POST</http-method> 
            <http-method>GET</http-method> 
        </web-resource-collection> 
        <auth-constraint> 
            <description>Only allow AuthenticatedUsers role</description> 
            <role-name>*</role-name> 
        </auth-constraint> 
        <user-data-constraint> 
            <description>Encryption is not required for the application in general. </description> 
            <transport-guarantee>NONE</transport-guarantee> 
        </user-data-constraint> 
    </security-constraint> 
    <login-config>
        <auth-method>FORM</auth-method>
        <form-login-config>
            <form-login-page>/index.html</form-login-page>
            <form-error-page>/LoginError.html</form-error-page>
        </form-login-config>
    </login-config>
    <security-role>
        <role-name>Users</role-name>
    </security-role>
</web-app>
